Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/6Ma7SbeEX9so_-ISeiQ70WeMAo4.roa
File: 6Ma7SbeEX9so_-ISeiQ70WeMAo4.roa (raw, json)
Hash identifier: p4luo740ht9vUDEX0PHSOMjVaiMBo+ZOGyJ9TMX2lGQ=
Subject key identifier: E8:C6:BB:49:B7:84:5F:DB:28:FF:E2:12:7A:24:3B:D1:67:8C:02:8E
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 019487F8F37CB53A2BB862ECEC3060E6D95B
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/6Ma7SbeEX9so_-ISeiQ70WeMAo4.roa
Signing time: Tue 21 Jan 2025 08:27:06 +0000
ROA not before: Tue 21 Jan 2025 08:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:f8:f3:7c:b5:3a:2b:b8:62:ec:ec:30:60:e6:d9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Jan 21 08:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c6bb49b7845fdb28ffe2127a243bd1678c028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:14:81:ef:33:cb:48:22:2a:37:43:29:de:
11:3f:b3:66:5a:b1:7b:fb:4a:0f:f3:ca:5a:f7:a1:
6e:f7:4a:5c:6b:7c:19:57:b1:f3:53:b8:36:c8:6d:
94:f7:75:fe:32:25:0d:71:7f:8b:72:ca:d5:e5:8f:
10:28:3d:2d:e4:78:04:fe:ac:5e:45:64:53:e5:f8:
a2:52:0a:1e:07:93:a5:e5:23:14:07:c3:79:c5:a5:
1b:2f:e8:a1:9d:76:ea:fd:46:88:90:b0:b3:75:ee:
f0:12:8c:a8:c1:db:e2:51:17:09:06:43:66:b0:5f:
77:c1:93:93:38:80:9d:b4:d7:6d:cd:aa:9e:36:aa:
eb:98:55:88:98:c0:ea:5f:e8:ba:a5:36:10:26:6f:
f0:b8:bc:23:2b:12:16:74:66:cb:4e:96:c9:dc:04:
23:b2:61:b2:ce:9d:c5:a0:5e:2a:62:a8:79:79:55:
99:8b:69:39:3a:7a:dd:e4:e5:f7:1b:c6:f5:a3:77:
76:4c:92:32:4a:ed:54:9b:d4:e2:c4:23:04:23:f5:
0d:a9:09:2f:d9:7e:56:f8:39:f6:58:2c:c6:73:e8:
48:01:8b:79:4b:b4:5e:be:70:25:d0:c0:1c:6a:b6:
a0:37:5b:f5:70:9e:21:01:46:94:ee:f1:ef:09:63:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:BB:49:B7:84:5F:DB:28:FF:E2:12:7A:24:3B:D1:67:8C:02:8E
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/6Ma7SbeEX9so_-ISeiQ70WeMAo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.56.0/22
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:f1:13:ba:25:19:90:b2:89:18:ce:63:5a:58:90:ad:d5:f3:
82:99:28:0f:87:21:30:32:4c:fc:55:52:82:df:9a:87:46:ee:
b9:3c:82:a0:b1:0c:77:9e:5b:af:9a:09:3f:52:ca:38:a6:99:
f6:40:5e:51:bb:2b:53:5d:e1:7e:92:fc:2e:1f:40:ae:1f:20:
19:a1:d7:52:95:5a:bd:20:49:3d:cc:ec:0d:16:28:a3:88:48:
45:3b:e0:b3:53:78:51:bd:8c:4e:89:0d:59:3f:96:e9:5d:9c:
1d:da:59:f7:c0:de:b7:55:03:e4:16:c5:e4:74:ef:ef:d2:5d:
c4:51:62:f5:8f:f3:59:82:5c:81:85:65:1c:05:81:c4:84:34:
88:1e:63:ec:dd:8b:5e:04:c5:da:7a:4e:8e:e2:99:e1:74:cf:
e5:13:9a:c1:a1:05:6f:b1:cf:98:a7:88:22:f7:0d:82:11:e8:
b5:40:2e:4a:b7:42:69:7e:8d:6e:f3:a6:79:7d:61:2d:3c:e0:
f5:7f:ee:8c:90:37:eb:4a:0e:d2:b0:b1:bd:7b:9b:b0:b6:c3:
c5:7b:23:d9:57:36:87:6d:84:a8:80:48:b1:62:58:22:82:22:
fe:02:c3:d2:c3:80:cc:bc:17:9e:a9:6f:f2:18:21:ed:0b:e1:
9b:98:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:26:26 2025 by rpki-client on console.sobornost.net